Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9F363391096E21C791D6D63868C46EAF3A89F864E17907FBC9212042289A2B2A/0/3134362e3135352e39372e302f32342d3234203d3e203230313931.roa
File:                     3134362e3135352e39372e302f32342d3234203d3e203230313931.roa (raw, json)
Hash identifier:          GwrBN7BmcsnjQlmtSiOE0korddBC5Y9WugPDgcoJtoE=
Subject key identifier:   FB:9F:9C:E3:69:BB:91:19:CF:DA:18:EB:E9:4F:0E:42:91:0D:5B:63
Certificate issuer:       /CN=C37532ABA0ACA5A1147437E17A76D3C110C193C4
Certificate serial:       709C781F76F0151AB09403C4C23CD6F26F41239F
Authority key identifier: C3:75:32:AB:A0:AC:A5:A1:14:74:37:E1:7A:76:D3:C1:10:C1:93:C4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C37532ABA0ACA5A1147437E17A76D3C110C193C4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9F363391096E21C791D6D63868C46EAF3A89F864E17907FBC9212042289A2B2A/0/3134362e3135352e39372e302f32342d3234203d3e203230313931.roa
Signing time:             Tue 05 Mar 2024 18:21:24 +0000
ROA not before:           Tue 05 Mar 2024 18:16:24 +0000
ROA not after:            Tue 04 Mar 2025 18:21:24 +0000
asID:                     20191
IP address blocks:        146.155.97.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9F363391096E21C791D6D63868C46EAF3A89F864E17907FBC9212042289A2B2A/0/C37532ABA0ACA5A1147437E17A76D3C110C193C4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9F363391096E21C791D6D63868C46EAF3A89F864E17907FBC9212042289A2B2A/0/C37532ABA0ACA5A1147437E17A76D3C110C193C4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C37532ABA0ACA5A1147437E17A76D3C110C193C4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:9c:78:1f:76:f0:15:1a:b0:94:03:c4:c2:3c:d6:f2:6f:41:23:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C37532ABA0ACA5A1147437E17A76D3C110C193C4
        Validity
            Not Before: Mar  5 18:16:24 2024 GMT
            Not After : Mar  4 18:21:24 2025 GMT
        Subject: CN=FB9F9CE369BB9119CFDA18EBE94F0E42910D5B63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:a1:ea:c5:41:3b:12:df:67:5a:d4:b8:fb:dd:
                    fd:f8:42:7b:96:ce:45:83:65:40:75:63:a7:e9:89:
                    21:d7:1b:99:1e:ab:35:96:b6:16:63:27:cb:59:e1:
                    67:83:c9:cf:3e:55:09:ce:fc:e3:9f:8e:37:58:a4:
                    4a:2b:f0:86:fe:1b:ea:0b:25:9c:95:02:77:00:90:
                    82:1b:b9:7a:e8:10:4f:d2:8a:98:8a:19:9d:a6:56:
                    50:c8:72:49:13:d0:5c:1b:40:39:04:9f:06:95:38:
                    0a:e4:eb:46:07:b5:b9:3d:b5:ba:e6:cb:54:de:cc:
                    19:ce:ac:55:fa:e0:a9:54:f6:bd:f6:b2:91:f6:d4:
                    4c:7c:83:60:f4:e1:bf:65:50:05:93:2b:39:33:8b:
                    55:c7:f8:e4:bc:c7:54:d9:ed:93:2e:b9:9b:69:ab:
                    20:4a:d6:76:cc:f3:a2:20:05:19:7d:fa:d9:3e:0f:
                    1f:5e:67:16:4d:6b:fd:cb:48:09:5d:18:2a:f9:5c:
                    f7:8e:68:13:b7:bc:3f:7c:b9:bf:23:27:31:a1:b8:
                    e4:2a:ab:62:82:e0:72:e8:00:8c:b9:b6:4d:ba:bd:
                    69:f1:f8:a5:ef:03:f4:a4:f5:ab:2f:20:1b:07:b3:
                    3d:9a:7e:74:82:b6:07:d4:da:39:87:27:80:7e:ff:
                    c8:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:9F:9C:E3:69:BB:91:19:CF:DA:18:EB:E9:4F:0E:42:91:0D:5B:63
            X509v3 Authority Key Identifier:
                keyid:C3:75:32:AB:A0:AC:A5:A1:14:74:37:E1:7A:76:D3:C1:10:C1:93:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9F363391096E21C791D6D63868C46EAF3A89F864E17907FBC9212042289A2B2A/0/C37532ABA0ACA5A1147437E17A76D3C110C193C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C37532ABA0ACA5A1147437E17A76D3C110C193C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9F363391096E21C791D6D63868C46EAF3A89F864E17907FBC9212042289A2B2A/0/3134362e3135352e39372e302f32342d3234203d3e203230313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.155.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:d7:03:3d:ba:83:b0:c4:16:10:77:30:78:e5:36:66:e9:e1:
         22:07:df:0a:d7:89:da:83:dd:bd:e5:a4:63:1f:b4:0a:1d:9d:
         c7:0c:32:32:e5:e6:f3:f7:74:0c:de:4d:91:14:b0:66:1c:09:
         80:2a:be:5f:16:79:0a:7c:a0:e8:05:80:9e:94:b8:e8:89:ad:
         22:73:63:d4:c2:a9:c6:d5:10:87:10:0b:32:ec:a4:09:fb:6a:
         f2:a0:9e:a9:14:6b:ca:b1:05:47:39:13:2d:66:8d:bc:0c:71:
         22:d0:50:ff:cf:56:83:dc:ce:96:02:73:d7:a3:c4:eb:2f:51:
         65:57:a2:4d:99:39:ed:a4:c5:21:6f:6f:6f:54:2a:29:d7:68:
         77:1b:26:34:e1:03:b5:81:0c:50:d2:ec:bc:41:e4:a9:1b:10:
         0b:71:69:d8:e2:25:3d:28:0a:f5:39:c0:8c:0f:49:6f:0f:a9:
         ad:21:5e:9a:5f:1d:8c:7b:6a:cb:2c:93:eb:4d:3a:37:1b:46:
         d9:76:a8:2b:7b:86:99:8d:2e:04:91:04:b0:ec:f9:49:c3:52:
         8d:2a:50:83:c7:3c:37:67:90:b3:1d:0d:e2:01:08:43:3a:a1:
         29:17:6b:aa:29:14:e7:77:3e:3d:02:4c:79:e8:50:07:b3:b4:
         ae:7c:3a:fc
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUcJx4H3bwFRqwlAPEwjzW8m9BI58wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzM3NTMyQUJBMEFDQTVBMTE0NzQzN0UxN0E3NkQzQzEx
MEMxOTNDNDAeFw0yNDAzMDUxODE2MjRaFw0yNTAzMDQxODIxMjRaMDMxMTAvBgNV
BAMTKEZCOUY5Q0UzNjlCQjkxMTlDRkRBMThFQkU5NEYwRTQyOTEwRDVCNjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfoerFQTsS32da1Lj73f34QnuW
zkWDZUB1Y6fpiSHXG5keqzWWthZjJ8tZ4WeDyc8+VQnO/OOfjjdYpEor8Ib+G+oL
JZyVAncAkIIbuXroEE/SipiKGZ2mVlDIckkT0FwbQDkEnwaVOArk60YHtbk9tbrm
y1TezBnOrFX64KlU9r32spH21Ex8g2D04b9lUAWTKzkzi1XH+OS8x1TZ7ZMuuZtp
qyBK1nbM86IgBRl9+tk+Dx9eZxZNa/3LSAldGCr5XPeOaBO3vD98ub8jJzGhuOQq
q2KC4HLoAIy5tk26vWnx+KXvA/Sk9asvIBsHsz2afnSCtgfU2jmHJ4B+/8hNAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQU+5+c42m7kRnP2hjr6U8OQpENW2MwHwYDVR0j
BBgwFoAUw3Uyq6CspaEUdDfhenbTwRDBk8QwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85RjM2MzM5MTA5NkUyMUM3OTFENkQ2Mzg2OEM0NkVBRjNB
ODlGODY0RTE3OTA3RkJDOTIxMjA0MjI4OUEyQjJBLzAvQzM3NTMyQUJBMEFDQTVB
MTE0NzQzN0UxN0E3NkQzQzExMEMxOTNDNC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DMzc1MzJBQkEwQUNBNUExMTQ3
NDM3RTE3QTc2RDNDMTEwQzE5M0M0LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOUYzNjMzOTEwOTZFMjFDNzkxRDZENjM4NjhDNDZFQUYzQTg5Rjg2NEUx
NzkwN0ZCQzkyMTIwNDIyODlBMkIyQS8wLzMxMzQzNjJlMzEzNTM1MmUzOTM3MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMDMxMzkzMS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJKbYTAN
BgkqhkiG9w0BAQsFAAOCAQEAGdcDPbqDsMQWEHcweOU2ZunhIgffCteJ2oPdveWk
Yx+0Ch2dxwwyMuXm8/d0DN5NkRSwZhwJgCq+XxZ5Cnyg6AWAnpS46ImtInNj1MKp
xtUQhxALMuykCftq8qCeqRRryrEFRzkTLWaNvAxxItBQ/89Wg9zOlgJz16PE6y9R
ZVeiTZk57aTFIW9vb1QqKddodxsmNOEDtYEMUNLsvEHkqRsQC3Fp2OIlPSgK9TnA
jA9Jbw+prSFeml8djHtqyyyT6006NxtG2XaoK3uGmY0uBJEEsOz5ScNSjSpQg8c8
N2eQsx0N4gEIQzqhKRdrqikU53c+PQJMeehQB7O0rnw6/A==
-----END CERTIFICATE-----
Generated at Thu Nov 21 15:01:37 2024 by rpki-client on console-fra.rpki-client.org